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I (TS//SI//REL) Intelligently filtering your data: 

Brazil and Mexico case studies 
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(U) Classification 



This presentation is classified 
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(U) The benefits 

□ (S//REL) Extracts from the full collection of 
data the activity most relevant to the selectors 
of interest 
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(U) The benefits 

□ (S//REL) Allows the analyst to implement 
analytics that 

□Are customized to their needs on a target-by-target 
basis 

□Could not or should not be run against all collection 
□Might find a needle in a haystack in an repeatable 
and efficient way 
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(U) Contact Graphs 



□(U) A graph is a set of objects (nodes, vertices) 
connected by links (edges). 

□(U) Graphs are a useful way of visualizing and 
analyzing the structure of communication 
networks 
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(U) Hops 

o(U) We may build a 1-hop graph by selecting all 
vertices connected to a root node 
□(U) A 1.5-hop graph contains all vertices connected to 
a root node and all connections between those vertices 



1 Hop 
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(U) applications in target development 



(C/REL) 
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(U//FOUO) S2C41 surge effort 




(TS//SI//REL) NSA's Mexico Leadership Team (S2C41) conducted a two- 
week target development surge effort against one of Mexico's leading 
presidential candidates, Enrique Pena Nieto, and nine of his close 
associates. Nieto is considered by most political pundits to be the likely 
winner of the 2012 Mexican presidential elections which are to be held 
in July 2012. SATC leveraged graph analysis in the development 
surge's target development effort. 
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(U) One-Time Work 



(TS//SI//REL) 
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(TS//SI//REL) 
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(U) Results 



□(S//SI//REL)85489 Text messages 

Interesting Messages 




Nieto 
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(U//FOUO) S2C42 surge effort 
(U) Goal 

(TS//SI//REL) An increased understanding of the 
communication methods and associated selectors of 
Brazilian President Dilma Rousseff and her key advisers. 
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(U) One-Time Work 



(TS//SI//REL) 
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2-hop Contact graph 
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(U//FOUO) S2C42 surge effort 

(TS//SI//REL) 
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Discovered new selectors 
associated with high-value 
targets 
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(U) Conclusion 

□(S//REL) Contact graph-enhanced filtering is a 
simple yet effective technique, which may allow 
you to find previously unobtainable results and 
empower analytic discovery 
□(TS//SI//REL) Teaming with S2C, SATC was able 
to successfully apply this technique against high- 
profile, OPSEC-savvy Brazilian and Mexican 
targets. 
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The Overall Classification Is: 
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Geopolitical Trends: Global Drivers 

(S//REL) Geopolitical Trend driver*: 




• Stre**or*to Regional Stability/ Rise of New Actor*. 

• Brazil and Turkey emerge on the global stage. Mexico is stressed and on our border. Arab Spring continues, the global “youth 
bulge" causes disaffection among youths who cannot find employment. 
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Geopolitical Trends: Key Challenges 
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<C) T he International Sec urity Issues Build-Out 

Global Capabilities Manager. ISI (S2C) 

Run Date: 05/17/2006 



(C) As the Analysis & Production Mission Build Out 
Strategy was originally envisioned. International 
Security Issues (ISI) mission was to remain primarily 
based in Washington. However, as other product line 
mission plans began to mature, opportunities for ISI 
to expand its mission capabilities opened. Planning is 
underway that will involve ISI participation in build- 
out activities with NSA/CSS Georgia. NSA/CSS 
Hawaii. NSA/CSS Texas and the European Security 
Command. The ISI mission is further extended by its 
relationships with F6 and Second and Third Party 
foreign partners that provide valuable analytic 
insights as well as their technical capabilities. 

(U) NSA Washington Mission 

(U) Regional 

(TS//SI) ISI is responsible for 13 individual nation 
states in tluee continents. One significant tie that 
binds all these countries together is their importance 
to U.S. economic, trade, and defense concerns. The 
Western Europe and Strategic Partnerships division 
primarily focuses on foreign policy and trade 
activities of Belgium. France. Germany. Italy, and 
Spain, as well as Brazil. Japan and Mexico. The 
division reporting also provides some key 
intelligence on military and intelligence activities in 
some of these countries. The Aegean and Ukraine 
division works all aspects of the Turkish target - 
diplomatic, govemmentaldeaderslrip. military and 
intelligence. 




(U) Transnational 




(S) Build-Out Support to Counterterrorism and 
Combating Proliferation 

(S//SI) Today. ISI is actively partnering with the 
Combating Proliferation (CP. S2G) and 
Counterterrorism (CT. S2I) product lines to 
incorporate financial intelligence analysis into their 
mission build-out plans. The idea is to integrate 
financial analysis with traditional target efforts as 
opposed to working the target from two separate 
perspectives, as is done in NSA Washington. ISI's 
long term goal is to introduce financial analysis as 
part of the Intelligence Analysis curriculum so any 
target can be enriched with the use of financial 
intelligence. The first CPFTM-trained analyst arrives 
at NSA Texas in June. NSA Hawaii's CT effort has 
several analysts who partner with FTM on select 
Southeast Asia counterterrorism targets. 



(U//FOUO) NSA Texas 
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